Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier: i9t17o/0ZOn3MkFJNSgp3SW6HU0kcafHNLmeglrybc8=
Subject key identifier: A4:12:61:F9:94:4E:5C:EB:3A:63:4D:5D:9D:29:4F:44:14:F6:25:DC
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial: 0199FCC63B0BB5C81905821CF355B8363D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 14:01:13 +0000
Manifest this update: Sun 19 Oct 2025 14:01:13 +0000
Manifest next update: Mon 20 Oct 2025 14:01:13 +0000
Files and hashes: 1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: J+R58vU8DgsdwREpNRkhfoQoRus0WtEqUqIb03GULt8=)
2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3b:0b:b5:c8:19:05:82:1c:f3:55:b8:36:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Validity
Not Before: Oct 19 14:01:13 2025 GMT
Not After : Oct 20 14:01:13 2025 GMT
Subject: CN=a41261f9944e5ceb3a634d5d9d294f4414f625dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:10:f4:ce:b6:d8:0a:f4:bb:1d:ab:96:37:
26:a0:bc:1b:67:8b:99:e8:91:53:37:34:f5:17:f2:
30:43:32:44:f1:83:3f:47:5f:34:49:4b:76:50:e9:
9a:7f:22:3d:98:d9:43:eb:b7:16:7b:8f:61:61:af:
bb:57:f1:2d:ce:78:9b:53:31:94:b4:18:78:1b:ac:
0f:62:8c:4a:1a:8e:48:e0:c4:5c:c0:51:9b:7d:1d:
86:da:ab:7e:e7:93:ce:73:30:5b:ec:9b:f8:6e:18:
0b:81:9a:3a:d6:ca:6c:d5:e8:ea:eb:94:96:0b:15:
a8:ef:f2:bf:ce:bc:c4:84:2c:da:68:24:f6:aa:cc:
b9:8e:f6:2f:40:39:97:6d:4c:8b:0a:e6:b4:9e:a2:
4c:71:8a:42:3e:bb:4b:c6:9c:3a:ba:d8:38:30:50:
63:f8:49:d5:63:77:b6:38:cd:ae:6a:5e:95:68:5d:
ed:db:da:24:f8:09:2e:4f:a1:42:66:64:c1:03:09:
83:06:17:7c:fe:63:9c:8b:d6:5b:09:36:a7:a1:c4:
f9:2c:1e:25:48:6e:43:31:61:75:7d:9a:33:43:cf:
5d:38:b9:e0:23:50:d2:4d:3e:dd:a5:93:64:ea:2f:
63:dd:d7:e5:ea:7d:ce:73:59:bb:c0:76:0d:d6:d9:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:12:61:F9:94:4E:5C:EB:3A:63:4D:5D:9D:29:4F:44:14:F6:25:DC
X509v3 Authority Key Identifier:
keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:16:a5:bf:a9:28:4b:5a:d5:18:a6:e2:db:d9:dc:a8:7a:84:
13:e7:09:77:4c:c4:13:a5:ab:34:e9:a7:45:bb:90:7b:c1:86:
df:87:e8:d2:89:97:da:9d:99:7b:fe:ca:22:6c:82:2f:14:46:
21:12:5c:c7:a2:25:d6:9d:44:f0:5e:27:49:fb:e0:dc:c8:de:
e1:5a:24:39:fa:92:4f:ea:f8:64:96:7b:93:f7:1a:b2:13:2a:
25:5b:8d:85:78:a4:c5:9d:5c:5d:0b:36:01:4d:8c:1c:9a:63:
84:85:7f:27:76:1a:75:b8:ee:ca:4f:ec:7e:3a:8b:52:8c:be:
48:53:d9:c9:b6:25:46:74:ca:32:c8:d4:a2:f9:60:67:f0:ce:
e3:ba:87:a2:9e:5a:75:e0:80:38:f2:1d:08:20:c5:a3:94:80:
5d:d5:80:cd:a3:25:94:1d:b2:a5:90:ab:c8:5f:92:37:6c:64:
61:5e:88:a3:b7:0f:f4:45:a7:84:45:82:1c:71:2d:a0:48:bc:
ae:7f:22:b8:42:f0:c5:4f:40:6b:c1:70:a8:a8:4a:ac:9c:33:
37:d6:d5:d0:81:dd:1e:09:29:ba:81:d6:87:1d:fd:be:d4:42:
e1:bc:fd:ca:60:62:4f:47:0f:25:94:e9:fa:8a:62:ff:05:a2:
46:70:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:46 2025 by rpki-client